7.2

CVE-2006-4447

X.Org and XFree86, including libX11, xdm, xf86dga, xinit, xload, xtrans, and xterm, does not check the return values for setuid and seteuid calls when attempting to drop privileges, which might allow local users to gain privileges by causing those calls to fail, such as by exceeding a ulimit.

Data is provided by the National Vulnerability Database (NVD)
X.Org ≫ Emu-linux-x87-xlibs Version7.0_r1
X.Org ≫ X11r6 Version6.7.0
X.Org ≫ X11r6 Version6.8
X.Org ≫ X11r6 Version6.8.1
X.Org ≫ X11r6 Version6.8.2
X.Org ≫ X11r7 Version1.0
X.Org ≫ X11r7 Version1.0.1
X.Org ≫ X11r7 Version1.0.2
X.Org ≫ Xdm Version1.0.3
X.Org ≫ Xf86dga Version1.0.0
X.Org ≫ Xinit Version1.0.2_r5
X.Org ≫ Xload Version1.0.0
X.Org ≫ Xorg-server Version1.02_r5
X.Org ≫ Xterm Version214
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.18% 0.394
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 7.2 3.9 10
AV:L/AC:L/Au:N/C:C/I:C/A:C